[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.4395460c.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  dissect_h248_T_errorCode (implicit_tag=1, tvb=0x2000000000715348, 
    offset=270, pinfo=0x2000000000607410, tree=0x2000000001b4ed20, 
    hf_index=270) at packet-h248.c:1945
1945	    h248_cmdmsg->error_code = val;
#0  dissect_h248_T_errorCode (implicit_tag=1, tvb=0x2000000000715348, 
    offset=270, pinfo=0x2000000000607410, tree=0x2000000001b4ed20, 
    hf_index=270) at packet-h248.c:1945
	val = 0
#1  0x2000000040e89dc0 in dissect_errorCode_impl (pinfo=0x2000000000607410, 
    tree=0x2000000001b4ed20, tvb=0x2000000000715348, offset=0)
    at packet-h248.c:1952
No locals.
#2  0x2000000040b564b0 in dissect_ber_sequence (implicit_tag=274, 
    pinfo=0x2000000000607410, parent_tree=0x9fffffffffffda9c, 
    tvb=0x20000000007152f0, offset=0, seq=0x2000000041ba5540, hf_id=-9599, 
    ett_id=-9568) at packet-ber.c:1117
	len = 270
	hoffset = 4
	count = 270
	class = 2 '\002'
	pc = 1
	tag = 0
	eoffset = 274
	class = 4 '\004'
	pc = 274
	ind = 0
	ind_field = 0
	tag = 129
	len = 274
	tree = (proto_tree *) 0x2000000001b4ed20
	end_offset = 274
	s_offset = 0
	length_remaining = 270
	next_tvb = (tvbuff_t *) 0x2000000000715348
#3  0x2000000040e89f00 in dissect_h248_ErrorDescriptor (implicit_tag=1, 
    tvb=0x20000000007152f0, offset=0, pinfo=0x2000000000607410, 
    tree=0x2000000001b4ed50, hf_index=13830) at packet-h248.c:1978
No locals.
#4  0x2000000040e89f60 in dissect_messageError_impl (
    pinfo=0x2000000000607410, tree=0x2000000001b4ed50, 
    tvb=0x20000000007152f0, offset=0) at packet-h248.c:1984
No locals.
#5  0x2000000040b57950 in dissect_ber_choice (pinfo=0x2000000000607410, 
    parent_tree=0x2000000001b4ee70, tvb=0x2000000000715298, 
    offset=1102742624, choice=0x2000000041ba8460, hf_id=13829, ett_id=5149, 
    branch_taken=0x0) at packet-ber.c:1559
	class = 2 '\002'
	pc = 1
	ind = 0
	tag = 0
	len = 274
	ch = (const ber_choice_t *) 0x2000000041ba8460
	tree = (proto_tree *) 0x2000000001b4ed50
	end_offset = 278
	start_offset = 4
	count = 270
	hoffset = 4
	hfinfo = (header_field_info *) 0x10e
	length = 7426800
	length_remaining = 270
	next_tvb = (tvbuff_t *) 0x20000000007152f0
	first_pass = 1
#6  0x2000000040e93ed0 in dissect_h248_T_messageBody (implicit_tag=0, 
    tvb=0x2000000000715298, offset=0, pinfo=0x2000000000607410, 
    tree=0x2000000001b4ee70, hf_index=13829) at packet-h248.c:5165
No locals.
#7  0x2000000040e93f30 in dissect_messageBody (pinfo=0x2000000000607410, 
    tree=0x2000000001b4ee70, tvb=0x2000000000715298, offset=0)
    at packet-h248.c:5172
No locals.
#8  0x2000000040b564b0 in dissect_ber_sequence (implicit_tag=293, 
    pinfo=0x2000000000607410, parent_tree=0x9fffffffffffdb0c, 
    tvb=0x20000000007150e0, offset=11, seq=0x2000000041ba84d8, hf_id=-9487, 
    ett_id=-9456) at packet-ber.c:1117
	len = 278
	hoffset = 15
	count = 270
	class = 2 '\002'
	pc = 1
	tag = 2
	eoffset = 293
	class = 8 '\b'
	pc = 293
	ind = 0
	ind_field = 0
	tag = 65548
	len = 293
	tree = (proto_tree *) 0x2000000001b4ee70
	end_offset = 293
	s_offset = 0
	length_remaining = 270
	next_tvb = (tvbuff_t *) 0x2000000000715298
#9  0x2000000040e93fa0 in dissect_h248_Message (implicit_tag=1, 
    tvb=0x20000000007150e0, offset=0, pinfo=0x2000000000607410, 
    tree=0x2000000001b4eea0, hf_index=13823) at packet-h248.c:5185
No locals.
#10 0x2000000040e94000 in dissect_mess_impl (pinfo=0x2000000000607410, 
    tree=0x2000000001b4eea0, tvb=0x20000000007150e0, offset=0)
    at packet-h248.c:5191
No locals.
#11 0x2000000040b564b0 in dissect_ber_sequence (implicit_tag=301, 
    pinfo=0x2000000000607410, parent_tree=0x9fffffffffffdb5c, 
    tvb=0x2000000000715088, offset=4, seq=0x2000000041ba8520, hf_id=-9407, 
    ett_id=-9376) at packet-ber.c:1117
	len = 293
	hoffset = 8
	count = 270
	class = 2 '\002'
	pc = 1
	tag = 1
	eoffset = 301
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 297
	tree = (proto_tree *) 0x2000000001b4eea0
	end_offset = 301
	s_offset = 0
	length_remaining = 270
	next_tvb = (tvbuff_t *) 0x20000000007150e0
#12 0x2000000040e94070 in dissect_h248_MegacoMessage (implicit_tag=0, 
    tvb=0x2000000000715088, offset=0, pinfo=0x2000000000607410, 
    tree=0x2000000001b4eea0, hf_index=-1) at packet-h248.c:5203
No locals.
#13 0x2000000040e942b0 in dissect_h248 (tvb=0x2000000000715088, 
    pinfo=0x2000000000607410, tree=0x2000000001b4f290) at packet-h248.c:5245
No locals.
#14 0x20000000409f40e0 in call_dissector_through_handle (
    handle=0x20000000000a7bc0, tvb=0x2000000000715088, 
    pinfo=0x2000000000607410, tree=0x2000000001b4f290) at packet.c:386
	saved_proto = 0x20000000415ea040 "H248"
	ret = 270
#15 0x20000000409f4ef0 in call_dissector_work (handle=0x20000000000a7bc0, 
    tvb=0x2000000000715088, pinfo_arg=0x2000000000607410, 
    tree=0x2000000001b4f290) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000607410
	saved_proto = 0x200000004166a1c0 "MTP3"
	saved_can_desegment = 0
	ret = 1752375340
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x6e69646f636e6520 <Address 0x6e69646f636e6520 out of bounds>}
	save_dl_dst = {type = 811999335, len = 170814834, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 1866858528, len = 2019893362, 
  data = 0x74202c656c706d61 <Address 0x74202c656c706d61 out of bounds>}
	save_net_dst = {type = 1109419368, len = 1931498053, 
  data = 0x617a696c61697265 <Address 0x617a696c61697265 out of bounds>}
	save_src = {type = 1852795252, len = 543584032, 
  data = 0x32312065756c6176 <Address 0x32312065756c6176 out of bounds>}
	save_dst = {type = 538970675, len = 538976288, 
  data = 0x797420666f202020 <Address 0x797420666f202020 out of bounds>}
	saved_layer_names_len = 4
	__PRETTY_FUNCTION__ = "call_dissector_work"
#16 0x20000000409f5880 in dissector_try_port (
    sub_dissectors=0x20000000001e4960, port=14, tvb=0x2000000000715088, 
    pinfo=0x2000000000607410, tree=0x2000000001b4f290) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x10e
	handle = (struct dissector_handle *) 0x20000000000a7bc0
	saved_match_port = 43
#17 0x2000000040fcb520 in dissect_mtp3_payload (tvb=0x2000000000607418, 
    pinfo=0x2000000000607410, tree=0x2000000001b4f290) at packet-mtp3.c:471
	service_indicator = 14 '\016'
	payload_tvb = (tvbuff_t *) 0x2000000000715088
#18 0x2000000040fcb990 in dissect_mtp3 (tvb=0x2000000000715030, 
    pinfo=0x2000000000607410, tree=0x2000000001b4f290) at packet-mtp3.c:529
	tap_rec = {addr_opc = {type = MTP3_NET_ADDR_FMT_DEC, pc = 129, 
    ni = 3 '\003'}, addr_dpc = {type = MTP3_NET_ADDR_FMT_DEC, pc = 264, 
    ni = 3 '\003'}, si_code = 14 '\016', size = 306}
	mtp3_item = (proto_item *) 0x2000000041f11220
	mtp3_tree = (proto_tree *) 0x2000000041f1120a
#19 0x20000000409f40e0 in call_dissector_through_handle (
    handle=0x2000000000659060, tvb=0x2000000000715030, 
    pinfo=0x2000000000607410, tree=0x2000000001b4f290) at packet.c:386
	saved_proto = 0x200000004166a1c0 "MTP3"
	ret = 270
#20 0x20000000409f4ef0 in call_dissector_work (handle=0x2000000000659060, 
    tvb=0x2000000000715030, pinfo_arg=0x2000000000607410, 
    tree=0x2000000001b4f290) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000607410
	saved_proto = 0x200000004154ebd8 "Frame"
	saved_can_desegment = 0
	ret = 538976288
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = 4294958800, len = -1610612737, data = 0x0}
	save_src = {type = 909128464, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 909128448, len = 536870912, 
  data = 0x20000000400da200 "z�P�"}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#21 0x20000000409f5880 in dissector_try_port (
    sub_dissectors=0x20000000000a73c0, port=43, tvb=0x2000000000715030, 
    pinfo=0x2000000000607410, tree=0x2000000001b4f290) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x10e
	handle = (struct dissector_handle *) 0x2000000000659060
	saved_match_port = 0
#22 0x2000000040d7b9e0 in dissect_frame (tvb=0x2000000000715030, 
    pinfo=0x2000000000607410, parent_tree=0x2000000001b4f290)
    at packet-frame.c:234
	except_sn = {except_down = 0x9fffffffffffe770, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe1f0, except_cleanup = 0x9fffffffffffe1f0}}
	except_ch = {except_id = 0x200000004157a990, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288329728, 
      except_code = 65598}, 
    except_message = 0xc9dffffff3620000 <Address 0xc9dffffff3620000 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 
        0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, -inf}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000001b4f260
	ti = (proto_item * volatile) 0x2000000001b4f0e0
	ts = {secs = 0, nsecs = 0}
	cap_len = 306
	pkt_len = 306
	tree = (proto_tree *) 0x2000000001b4f290
	item = (proto_item *) 0x10e
#23 0x20000000409f40e0 in call_dissector_through_handle (
    handle=0x20000000000a7400, tvb=0x2000000000715030, 
    pinfo=0x2000000000607410, tree=0x2000000001b4f290) at packet.c:386
	saved_proto = 0x200000004154ebd8 "Frame"
	ret = 270
#24 0x20000000409f4ef0 in call_dissector_work (handle=0x20000000000a7400, 
    tvb=0x2000000000715030, pinfo_arg=0x2000000000607410, 
    tree=0x2000000001b4f290) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000607410
	saved_proto = 0x20000000413a9688 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 1411409519
	save_writable = 0
	save_dl_src = {type = 1850303598, len = 774468195, 
  data = 0x9fffffffffffe4a0 ""}
	save_dl_dst = {type = 909128549, len = 1701344288, 
  data = 0x65706f2074657320 <Address 0x65706f2074657320 out of bounds>}
	save_net_src = {type = 909128562, len = 537554543, 
  data = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>}
	save_net_dst = {type = 1763704864, len = 1667851374, 
  data = 0x6168742073657461 <Address 0x6168742073657461 out of bounds>}
	save_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dst = {type = AT_NONE, len = 0, data = 0x0}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#25 0x20000000409f7ef0 in call_dissector (handle=0x20000000000a7400, 
    tvb=0x2000000000715030, pinfo=0x2000000000607410, tree=0x2000000001b4f290)
    at packet.c:1704
	ret = 270
	__PRETTY_FUNCTION__ = "call_dissector"
#26 0x20000000409f3cb0 in dissect_packet (edt=0x2000000000607400, 
    pseudo_header=0x2000000000607410, pd=0x2000000000714800 "�\bA ", 
    fd=0x9fffffffffffe9f0, cinfo=0x0) at packet.c:325
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe790, 
    except_cleanup = 0x9fffffffffffe790}}
	except_ch = {except_id = 0x20000000413a9878, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288329728, 
      except_code = 2305843009220647936}, 
    except_message = 0x20000000357200f1 <Address 0x20000000357200f1 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 
        0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, -inf}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#27 0x20000000409edba0 in epan_dissect_run (edt=0x2000000000607400, 
    pseudo_header=0x2000000000606e48, data=0x2000000000714800 "�\bA ", 
    fd=0x9fffffffffffe9f0, cinfo=0x0) at epan.c:158
No locals.
#28 0x2000000000036e50 in process_packet (cf=0x200000000008fcb8, pdh=0x0, 
    offset=2305843009220015104, whdr=0x2000000000606e28, 
    pseudo_header=0x2000000000606e48, pd=0x2000000000714800 "�\bA ", 
    err=0x9fffffffffffea60) at tethereal.c:2411
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 1, pkt_len = 306, 
  cap_len = 306, cum_bytes = 306, abs_ts = {secs = 1109946808, 
    nsecs = 76000000}, rel_ts = {secs = 0, nsecs = 0}, del_ts = {secs = 0, 
    nsecs = 0}, file_off = 40, lnk_t = 43, flags = {passed_dfilter = 0, 
    encoding = 0, visited = 0, marked = 0, ref_time = 0}, 
  color_filter = 0x1000c}
	create_proto_tree = 6321152
	edt = (epan_dissect_t *) 0x2000000000607400
	passed = 270
#29 0x2000000000036400 in load_cap_file (cf=0x200000000008fcb8, 
    save_file=0x0, out_file_type=589072) at tethereal.c:2236
	linktype = 6319656
	snapshot_length = 6319656
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 40
#30 0x2000000000033640 in main (argc=6, argv=0x28) at tethereal.c:1393
	opt = 270
	i = 6
	arg_error = 654872
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 2147483647
	capture_filter_specified = 654880
	if_list = (GList *) 0x2000000000734c68
	if_entry = (GList *) 0x200000000009fe18
	if_info = (if_info_t *) 0x1
	adapter_index = 1
	p = 0x20000000400d6170 ""
	err_str = "\000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000\000\000\000\000\000\000\000\026]\001\000\000\000\000\000\000��\232\000\000\000\000>\000\001\000\000\000\000\000p������\237\025\000\000\000\024\000\000\000\000�\016@\000\000\000 "...
	cant_get_if_list_errstr = (gchar *) 0x1 <Address 0x1 out of bounds>
	list_link_layer_types = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000734b00 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	start_capture = 0
	if_text = (gchar *) 0x10e <Address 0x10e out of bounds>
	lt_list = (GList *) 0x2000000000734c68
	lt_entry = (GList *) 0x1
	data_link_info = (data_link_info_t *) 0x14
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x2000000041f199d8
	optstring = "a:b:c:d:Df:F:hi:lLnN:o:pqr:R:s:St:T:vVw:xy:z:"
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 601 posted.